summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorsmos <seth.mos@dds.nl>2011-08-18 11:39:45 +0200
committersmos <seth.mos@dds.nl>2011-08-18 11:39:45 +0200
commit5a3031ea170c386e9240c2f5622ede590826bdcf (patch)
tree713dabbe2c3dca6ec221b24d4b08eb120a166a0f
parent49047fb471f382bba689cffad9e313600c6b0519 (diff)
downloadpfsense-5a3031ea170c386e9240c2f5622ede590826bdcf.zip
pfsense-5a3031ea170c386e9240c2f5622ede590826bdcf.tar.gz
Make sure that we disable accepting router advertisements unless we explicitly enable them
-rw-r--r--etc/inc/interfaces.inc5
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/inc/interfaces.inc b/etc/inc/interfaces.inc
index cba1454..cff2fd1 100644
--- a/etc/inc/interfaces.inc
+++ b/etc/inc/interfaces.inc
@@ -2659,13 +2659,14 @@ function interface_configure($interface = "wan", $reloadall = false, $linkupeven
// Need code to handle MLPPP if we ever use $realhwif for MLPPP handling
$realhwif = $realhwif_array[0];
+ /* Disable Accepting router advertisements unless specifically requested */
+ log_error("Deny router advertisements for interface {$interface}");
+ mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " inet6 -accept_rtadv");
if (!$g['booting'] && !substr($realif, 0, 4) == "ovpn") {
/* remove all IPv4 and IPv6 addresses */
while (mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " -alias", true) == 0);
while (mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " inet6 -alias", true) == 0);
- /* Disable Accepting router advertisements unless specifically requested */
- while (mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " inet6 -accept_rtadv") == 0);
/* only bring down the interface when both v4 and v6 are set to NONE */
if(($wancfg['ipaddr'] <> "none") && ($wancfg['ipaddrv6'] <> "none")) {
OpenPOWER on IntegriCloud